App Control: File "[Sha256Hash]" was identified by Microsoft as malicious

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

What are "App Control: File "[Sha256Hash]" was identified by Microsoft as malicious" events?

Environment

• App Control: All Supported Versions

Resolution

These events are stemming from the SCEP connector that is configured under System Configuration (gear icon) > Connectors tab.

Additional Information

The SCEP connector has been deprecated and is no longer supported. In versions 8.1.6 and higher it will no longer show up in new installs and will be hidden if it is not enabled. It will be removed completely in a future version.